Advanced windows debugging
by Mario Hewardt · first published 2007
7mentions
5recommended by
6HN commenters
2016–2026first – last mentioned
83% recommend17% neutral
Why HN recommends it
In-depth look at Windows internals and debugging, focused on low-level tools and techniques. It covers kernel-level work, reverse engineering, and how Windows behaves.
Summarised by Claude from recommending comments
Affiliate links. As an Amazon Associate I earn from qualifying purchases.
…https://blogs.msdn.microsoft.com/ntdebugging/2009/08/27/part... XPERF is built to consume ETW traces https://blogs.msdn.microsoft.com/ntdebugging/tag/XPERF/ https://blogs.technet.microsoft.com/askpfeplat/2013/03/22/tr... Also Advanced Windows debugging[1] and Advanced .NET debugging[2] to be very good for learning debugging in windows land. [1] http://www.amazon.in/Advanced-Debugging-Addison-Wesley-Micro... [2]https://www.amazon.com/Advanced-NET-Debugging-Mario-Hewardt/...
on “Intro to kernel debugging” ↗Here are a few in no particular order: 1. Expert .NET 2.0 IL Assembler (ISBN 1590596463) 2. Advanced Windows Debugging (ISBN 0321374460) 3. Advanced .NET Debugging (ISBN 0321578899) 4. .NET Framework reference source code (https://referencesource.microsoft.com/) 5. CoreCLR source code (https://github.com/dotnet/coreclr)…
on “Eagle: Tcl interpreter implemented in CLR” ↗Perhaps the book Advanced Windows Debugging by Mario Hewardt and Daniel Pravat will get you excited enough to take up "Kernel Development" work.
on “Ask HN: Has anyone here worked on the Windows kernel?” ↗How about a book? I like "Advanced Windows Debugging" by Mario Hewardt and Daniel Pravat.
on “Writing a Debugger from Scratch: Breakpoints” ↗…about a) Windows Internals b) Tools to debug at that level. Most application-level programmers won't need nor are exposed to these. However, if you are interested in knowing what is all involved, see; Advanced Windows Debugging by Mario Hewardt and Daniel Pravat - https://advancedwindowsdebugging.com/ Review of the book by Raymond Chen himself! - https://devblogs.microsoft.com/oldnewthing/20071218-01/?p=24...
on “DLL that was not present in memory despite not being formally unloaded” ↗I didn't say that I was any good, just that I enjoyed it. I have a dog eared copy of Advanced Windows Debugging that I've used, but I've also have books around reverse engineering, disassembly and a little bit of curiosity and practice. I have also the .NET version which I haven't used as much. I also enjoyed the…
on “AI Meets WinDBG” ↗…Thanks so much for pointing us to DebugDiag. I have never found this and I am checking it out now. Very exciting! UPDATE: I am reading the Code Machine posts listed in another comment, but it seems that Advanced Windows Debugging book might be the start of what I am looking for. Would love to know if you have other suggestions.
on “Intro to kernel debugging” ↗